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We present efficient quantum algorithms for the hidden subgroup problem (HSP) on the semidirect 
product of cyclic groups 1 v r x Z p 2 , where p is any odd prime number and r is any integer such that 
r > 4. We also address the HSP in the group Zjv x $ Z p 2 , where N is an integer with a special prime 
factorization. These quantum algorithms are exponentially faster than any classical algorithm for 
the same purpose. 
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I. INTRODUCTION 

Most of exponentially fast quantum algorithms can be 
cast into the hidden subgroup problem (HSP), which is 
considered a paradigm for the development of quantum 
algorithms. The HSP on the finite group G can be de- 
scribed as follows. Let X be a finite set and / : G — > X 
a function such that f(gi) = /Q72) if and only if g\ and 
<72 are in the same left coset of some subgroup H in G. 
The problem consists in determining generators for H by 
querying the function /. If the computational complex- 
ity of the algorithm is 0(log|G|) considering that each 
query counts as one computational step, we say that the 
HSP is solved efficiently. It is usual to say that the func- 
tion / hides the subgroup H in G. Simon [l[ and Shor @ 
algorithms solve special cases of the abelian HSP. When 
the group G is abelian, there is an efficient solution in 
the general case [1, H| . 

If G is not abelian but is "close" to abelian in some 
sense, the HSP may be solved by reduction to the abelian 
HSP. There are many examples of this method in the 
literature [H, Q, which may not employ new quantum 
algorithms directly. Recently, Inui and Le Gall Q have 
presented an efficient algorithm for the HSP on the group 



Z p r XUZ. 



ip for odd prime p and positive integer r employ- 



ing direct quantum techniques. Using the classification 
of the subgroups of Z p r x $ 1 p presented inffl] , it is pos- 
sible to use the Ettinger-H0yer reduction Q to simplify 
the algorithm to the abelian HSP 0. There is an al- 
ternative form to reduce Inui and Le Gall's algorithm to 
the abelian HSP by employing the results of Ref. Q on 
normal subgroups of solvable groups. We discuss this 
method in Sec. I VII In Ref. the authors have ex- 
tended the solution of the HSP to the group Zjv 
where N is factorized as N = p\ x ■ ■ ■ pj"™ and p does not 
divide each Pi — 1 for 1 < i < n. 

In the present work we address the HSP on the group 



Z p r x 0Z p 2 for any odd prime p and any integer r such that 
r > 4. We present an efficient solution for the HSP both 
by using direct quantum algorithms and by reducing to 
the abelian HSP. We also address the HSP on the group 
Zjv xi ^ Z p 2 where N is factorized as N = p^ 1 ■ ■ -p^™ and 
p does not divide each pi — 1. 

This paper is organized as follows. In Sec. |TT] we de- 
scribe the structure of the group 1 p r Z p 2 and give 
the complete list of subgroups. There are two classes of 
non-trivial isomorphic groups depending on the homo- 
morphism (f). In Sec. IIIII we list the abelian subgroups 
that can be used to run the abelian HSP in order to 
obtain information about H (the hidden subgroup). In 
Sec. HVI we address the case when H is cyclic in the first 
class of groups. In Sec. |V] we address the non-cyclic case 
also in the first class. In Sec. I VII we address the sec- 
ond class. In Sec. IVIII we address the HSP on the group 
Zjv x ^ Z p 2 with some restrictions over the values of the 
integer N. In Sec. IVIIll we present our conclusions. 



II. THE STRUCTURE OF 1 p r x Z p2 

The group Z p r x^ Z p 2 is the set {(a, 6), a € Z p >-,6 6 
Z p 2} with the group operation (a±, 6i)(a2, 62) = (ai + 
0(6i)(a 2 ), b 1 + b 2 ), where 4> is any group homomorphism 
from Z p 2 into the group of automorphims of Z p r. The 
group Z p r x^Zp2 is generated by x = (1, 0) and y = (0, 1) 
and 4> is completely determined by the value a = </>(l)(l), 
which is in Z*. For r > 4 the possible values of a are 
2 + 1, where < r < p 2 . There are two classes of 



rp 

non-trivial isomorphic groups. 

Class (1) is characterized by the values of t such that 
gcd(r,p 2 ) = 1. We take r = 1, that is a = p r ~ 2 + 1 
with no loss of generality. Using that (a, b) = x a y b and 
<j)(b) (a) = aa b we get 



(x ai y bl ) (x a2 y b2 ) = x a ^+ a ^P r 



2+1 V 1+h2 - 
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Class (2) is characterized by the values of t such that 
gcd(r,p 2 ) = p. We take r =p, that is, a — p 1 '^ 1 + 1 with 
no loss of generality. The product of two group elements 



2 



is given by 



IV. THE CYCLIC CASE 



(x ai y bl ) (x a2 y b2 ) = x ai+a2ibipr 1 + 1 ^y^+ b \ 

The subgroups of Z p r x ^ Z p 2 for both classes have the 
following forms: 



x tp y pJ 



(1) 



where < i < r, < j < 1, and i 6 Z* ; where Z = 



min{r — i, 2 — j}, 



where < i < r, < j < 1, and 



a; tp, 2/,a; p,+1 



(2) 



(3) 



where < i < r and t € Z*. 

The subgroups are characterized by 3 parameters: t, 
i, and j. This is too complex for any direct attempt to 
build a quantum algorithm. As usual, the strategy we 
will use is the following. Let G be an abelian subgroup 
of Zpr- xi ^ Z p 2 and suppose that the function / hides H in 
Z p r X ^ Z p 2. If i? is subgroup of G, then the generators 
of H can be found efficiently by restricting / to G and 
by employing the algorithms of the abelian HSP. If H 
is not a subgroup of G, this method hnds efficiently the 
generators of H (1G, which may yield partial information 
about H. We will see that this strategy eliminates the 
parameter i. The remaining parameters t and j will be 
determined by two methods: (1) direct quantum algo- 
rithms and (2) reduction using the algorithms described 
in Ref. [|. 



III. REDUCTION TO ABELIAN SUBGROUPS 

The abelian subgroups of Z p r >t^Z p 2 that we use in this 
part of the reduction are (x) and (y). Let H x = H n (x) 
and H y = Hf\ (y) . Function f x defined by f x (a) = f(a, 0) 
hides H x in Z p r. Function f y defined by f y (b) — f(0,b) 



hides H y in Z p 2 . The solution of the abelian HSP on Z p r 
and Z p 2 with oracles f x and f y respectively determines 
the generators for H x and H y . The form of these groups 
are H x — (x p ) and H y — (%j p ), where < m < r e 
< n < 2. Therefore, the abelian reduction yields the 
values of m and n efficiently. 

Using the values of m and n it is possible to determine 
whether H is cyclic or not. If H is generated by two 
elements, either formula {2]| or ([3]), one can verify that 
H x and H y cannot be the trivial group. One eventually 
concludes that if m = r or n = 2 then H is cyclic, that 
is, H is described by formula (JTJ) ; and if < m < r 
and < n < 2 then H is not cyclic, that is, either H is 
described by formula ^ or by formula ([3]). 

In the following sections we address the groups in class 
(1). In Sec. I VII we address the groups in class (2). 



Suppose that m = r or n = 2. By running the abelian 
HSP on the subgroup (x p2 , y^ with the oracle / re- 
stricted to this subgroup, either we determine generators 
for H or in the worst case we obtain partial information 
about H. The way to proceed at this point is to calculate 
the intersection of the groups of the form given by for- 



y). We split into 3 cases: (i) m 



mula fTJ) with 

and n = 2, (ii) m = r and n < 2, and (m) m < r and 
n = 2. 

In case («), the groups of the form given by formula (|TJ) 
are subgroups of (^x p ,y\ therefore the abelian reduc- 
tion provides the values of the parameters t, i, and j. 
The possible forms of H are (x tpr 2 y^ where t € Z* 2 , 

£ tpr ~ V) where t G Z*, and ( (Q, 0) ). 
Case (ii) is similar to case («), because H is a subgroup 
of (^x p2 , y\. The abelian reduction provides the values of 
the parameters t, i, and j. The possible forms of H are 
(y) when n = and (^x tp +3 y pl ^ when n = 1 where 

tez; 2 _ J7 o<j < i. 

In case (m), if m = or m > 4, if is subgroup of 
a: p , y^. The abelian reduction provides completely the 
values of the parameters t, i, and j. The possible forms of 
H are (a;) when m — and (x p ) or ^:r tp ) when 

to > 4 where i £ Z* 2 _j and < j < 1. The remaining 
cases are m = 1, m = 2, and to = 3. 

If to = 1, the abelian reduction eliminates the param- 
eter i. The values of t and j remain unknown. The 
possible forms of H are (x p ) and (x t y p ) where t € Z*. 
We have to decide between these two forms and in the 
last form we have to determine the value of t. We pro- 
ceed by employing a quantum algorithm. We prepare the 
quantum computer in the initial state 



p-i p 2 -i 



Hi) 



h £ £ i a '> i & '> 

P a'=0 6'=0 



(4) 



Now we measure the third register in the computational 
basis. The result depends on the form of H. Suppose by 
now that H = (x t y p ), for some t € Z*. The result is 



p-i 



|V>2 



— ^ |(a + * modp) |6 +^0 , (5) 



for some ao and 6o such that < ao < p and < 6o < 
p 2 randomly distributed. We have disregarded the third 
register since it will be irrelevant from now on. Now we 
apply the Fourier transform operator F p (3F p 2 on state 



3 



\ip2)- The result is 



p-i p -l 



N>3 



^E E <°^>m, (6) 



P a=0 6=0 

ai+6=0 mod 7 



where w p (wp 2 ) is the primitive p-root (p 2 -root) of the 
unity. Now we measure the state ^3) in the compu- 
tational basis and get values a and b such that at + 
b = Omodp. If a ^ Omodp, then we calculate t\ = 
-a(-%modp. If f{x H y p ) = f(l) then H = (x h yP) 
otherwise H — (x p ). The success probability is 1 — 1/p. 



If to — 2 the possible forms of H are (x p 



[X""y 



where t g Z* , and where t g Z* 2 . We have to decide 
among those forms and then we have to determine the 
value of t. We proceed by using a quantum algorithm. 
We use the initial state 



p -ip 



1^1 



3 E E |/( 



a'=0 b'=0 



(7) 



and after measuring the third register we apply the 
Fourier transform operator F p 2 £g)F p 2 . The way to pro- 
ceed is similar to the case m = 1. At the end, if 
a Omodp, then we calculate t\ = — a'-^-'&modp 2 and 
t 2 = -a^bmodp. If f{x ll y) = /(l) then H = (x^y). 
If f(x t2P y p ) = /(l) then H = (x t2P y p ) otherwise H = 



If to = 3 the possible forms of H are (^x p \, y p 

where t £ Z*, and (x tp y) where i € Z* 2 . This case is 
very similar to the case to = 2. The only differences 
are that the first sum of the state \ipi) runs from to 
p 3 — 1 and the Fourier transform operator is Fp3(E)F p 2. 
The remaining analysis of the algorithm is similar to the 
case to = 2. 



THE NON-CYCLIC CASE 



Suppose that < m < r and < n < 2. Either H has 
the form given by formula ^ or the form of formula ^ . 
If n = then there is only one possible form which is 
H = (x p , yj. From now on we consider the case n = 1. 
If to = then there is only one possibility which is H = 

(x,y p ). For to > 3, H is a subgroup of (^x p ~ , y\, therefore 

the abelian reduction over (^x p , y\ provides the values 
of the parameters t, i, and j. The possible forms of H 



are (a; pm ,y p ) and H 



tp" 



y,x" 



The remaining 



cases are m = 1 and to = 2. 

If to = 1 then either H — (x p , y p ) or H = (x t y, x p ), t e 
Z*. The abelian reduction does not determine between 
those two forms and does not provide the value of t. We 
proceed by employing a quantum algorithm. We prepare 



the quantum computer in the following initial state 

i^) = ^EEi a ')i&')|/(^V; 

P a'=0 b'=0 



(8) 



We measure the third register in the computational basis. 
The result depends on the form of H . Suppose by now 
that H — (x t y,x p ), for some t £ Z*. The result is 

1^2) = —J2\(^+tl)modp)\l), (9) 

for some ao such that < ao < p randomly distributed. 
Now we apply the Fourier transform operator F p £g)Fp on 
state \ip2)- The result is 



1 



p-i 



m = ~ E <°i«>i fo >- (io) 

" a, 6=0 
ai+6=0 mod p 



Now we measure the state \ipa) in the computational ba- 
sis and get values a and b such that at + b = Omodp. 
If a ^ Omodp, then we calculate t\ = — a^^bmodp. 
If f{x tl y) = /(l) then if = (x tl y,x p ) otherwise H = 
(x p ,y p ). The success probability is 1 — 1/p. 

If to = 2 then cither H = (x p2 , y p ^ or H = (x tp y, x p2 ^ 

where t £ Z*. For this case we use the same strategy of 
the case to = 1 with some minor differences. 

The use of direct quantum algorithms can be avoided 
if one notes that all subgroups for which we have em- 
ployed quantum algorithms in Sees. IIVI and [V] are nor- 



mal in "E p t xi ^ Z p 2 . The list of those subgroups is 

1 < k < 3, (x p ,y p ), <V,y p ), (x*y p ), (x tp y p ), (x tp V), 

(afy.a*), (x tp Vl x p2 ), t G Z; ; (x*y), (x tp y), t g Z; 2 . It 

is easy to verify because they contain the commutator 

group of Z p r X0 Z p 2 which is (x pr 2 \. We know that 

Z p r xi ^ Zp2 is a finite p-group, therefore it is solvable. 
Theorem 7 of Ref. Q states that if H is a normal hidden 
subgroup of a solvable group G, then the generators of 
H can be found by a quantum algorithm in time poly- 
nomial in log \G\. In the proof of their result, they show 
constructively how the problem reduces to the abelian 
HSP. From this argument we conclude that the HSP on 
Zpr x 4, Zp2 for odd prime p and r > 4 can be fully reduced 
to the abelian HSP. 



VI. THE GROUPS IN CLASS (2) 

The groups in class (2) are somewhat simpler than the 
ones in class (1). The main reason is that the subgroup 
(y p ) is normal in Z p r 7L v i and the quotient group 
(Zpr xi ^ Zp2)/ (y p ) is isomorphic to Z p r xi Z p when we 
take the homomorphism <fi that characterizes class (2). 



4 



Let us show how the HSP on the groups in class (2) 
reduces to the abelian HSP. In Sec. IIIII we have showed 
how to determine the values of parameters to and n. Us- 
ing these values, we can know in advance whether (i) H 
is completely determined, (ii) H is a subgroup of (x p ,y), 
or (Hi) H is normal. Case (i) occurs when m or n is zero. 
If m = then H = (x, y p ) where < n < 2. If n = 0, 
then H = (x p , y) where < to < r. 

Case (ii) occurs in the following cases. If m = r and 

< n < 2 then H = (^x tpr " +; ' y p3 ^j where either t = 1 
when j = n or t € ^p^-j when < j < n. If 3 < 

m < r and n = 2 then = (x tpm+J ' ' where either 
t = 1 when j = 2 or t € Z* 2 _ 3 when < j < 2. If 
2 < to < r and n = 1 then either = (a; p " , y p ) or 
i? = (x tpm ~ 1 y,x pm ' X i where i e Zp. 

Case (Hi) occurs in the following cases. If 1 < to < 2 
and n = 2 then H = (x tp ' n+J ~ 2 y p3 ^ where < j < 2. If 

to = n = 1 then either H = (x p , y p ) or H = (x l y, x p ). 

The strategy to solve the HSP on Z p r x ^Z p 2 in class (2) 
is the following. In case (i) we are done. In case (ii) we 
run the abelian HSP with the function / restricted to the 
subgroup (x p ,y). This procedure determines completely 
the parameters of the generators of H. In case (Hi) we 
employ the algorithms described in Ref. 0]. We can use 
them because we know in advance that H is normal. 

The same strategy works for the group Z p r x Z p which 
was addressed in Ref. Q- This group has the following 
properties. All proper subgroups are abelian and the 
maximal subgroups are normal. By running the abelian 
HSP on the subgroups (x), (y), (x p , y), either one obtains 
the generators of H or learns that H is normal. In the 
latter case one employs the methods of Ref. [j| . 

VII. GROUPS OF THE FORM Z N x^Z^ 

The same kind of reduction presented in Ref. ap- 
plies to the group Zjv x 0Z p 2, where the prime factoriza- 
tion of ./V is p^ 1 ■ ■ ■ p r ^ and p does not divide each pj — 1 , 

1 < j < n. 

The following result holds is this case. If p and q are 
distinct primes satisfying p\(q—\) then (Z q s x Z p r) x^ 
Z p 2 is isomorphic to Z q s x (Z p r- x ^ Z p 2 ) for some homo- 
morphism ip from Z p 2 into the group of automorphims of 
Z p r . The proof is similar to the one presented in Lemma 

2 of Ref. • Because p must divide the order of Z* N , we 
can choose pi — p with no loss of generality. Using those 



results, it is straightforward to show that 

Zjv X0 Z p 2 = Z p r 2 x ■ ■ ■ x Zj£n x (Z p n x,/, Zpz). 

The orders of the groups in the direct product of the 
above isomorphism are relatively prime. Therefore, the 
HSP on Zjv x<0 Z p 2 reduces to the HSP on each factor. 
Either the factor is an abelian group or it is the group 
Zp^i x^, Zp2 , which was addressed in this paper if r\ > 4. 



VIII. CONCLUSIONS 

We have described efficient quantum algorithms for the 
HSP on the group Z p r x ^ Z p 2 , where p is any odd prime 
number and r is any integer such that r > 4. The method 
relies on the classification of all subgroups of Z pr x ^ Z p 2 . 
The subgroups are characterized by three parameters. By 
using reductions to the abelian HSP, the number of in- 
dependent parameters decreases and the values of the re- 
maining ones are found either by employing direct quan- 
tum algorithms or by using the reduction described in 
Ref. 0]. We have also addressed the HSP on the group 
Z^v x^Zp2 where N is factorized as N = p] 1 ■ ■ -p 7 ^ 1 and p 
does not divide each pi — 1, by employing an isomorphism 
between Zjv x j, Z p 2 and the direct product of Z p r x ^ Z p 2 
with cyclic groups. 

The computational complexity of the algorithm can 
be bounded by the following analysis. The order of the 
group Z p r x ^ Zp2 is p( r + 2 ) . We have employed abelian re- 
ductions, direct quantum algorithms, and the reduction 
described in Ref. Q . In all those parts we can guarantee 
that the complexity is 0(poly((r + 2)logp)). Therefore 
the overall complexity of the algorithm for solving the 
HSP on Zpr X0 Zp 2 is 0(poly((r + 2) logp)). The algo- 
rithm is probabilistic and we guarantee a success proba- 
bility greater than 1/2. 

We are currently addressing the HSP on the group 
Zpr x Z p3 for any odd prime p and integers r and s such 
that r > 2s. This case seems to be a straightforward 
generalization of the algorithms presented in this work. 
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